Robert.Agent has been upgraded

Screenshot 2025-09-19 174256

I have now upgraded Robert.Agent to use GPT5 deep reasoning as you can see above.

All you need to do is send an email to robert.agent@ciaops365.com with your M365 question in the BODY of the email and you should get a reply to that question in a few minutes. Remember, deep reasoning models take longer to products results.

It is also important to note with Robert.Agent:

1. Each email is treated as a separate conversation. Robert.Agent has no ‘memory’ of any previous email you may have sent. Thus, treat each email you send as a single unique response or session.

2. Robert.Agent has normal Exchange Online security protection. This means, if the email you send looks like spam (i.e. no subject, signature, bad grammar and spelling, etc) then you won’t get a response.

Try the upgraded Robert.Agent out and let me know what you think.

Improved Windows Defender script

Recently, Microsoft updated Visual Studio code and Github Copilot to include the ability to auto detect which AI is best model to use when coding:

Screenshot 2025-09-15 081243

I therefore thought I’d take it for a spin and elected to use it to improve the script:

https://github.com/directorcia/Office365/blob/master/win10-def-get.ps1

which you now see the results for yourself. The script require escalation to local administrator to gather the information it needs.

Screenshot 2025-09-15 081733

Tests include:

– Attack Surface Reduction Rules

– Defender Settings

– Scanning Settings

– Latest Signature / Engine Versions

– Platform Security

and more. You will find the documentation at:

https://github.com/directorcia/Office365/wiki/Windows-Security-Audit-Script

which was also generated thanks to Github Copilot.

Let me know what you think and if you feel anything should be added.

CIA Brief 20250914

image

Intune AI Agent: Instant Threat Defense, Invisible Protection –

https://techcommunity.microsoft.com/blog/microsoft-security-blog/intune-ai-agent-instant-threat-def…

Microsoft Sentinel’s AI-driven UEBA ushers in the next era of behavioral analytics –

https://techcommunity.microsoft.com/blog/microsoftsentinelblog/microsoft-sentinel%E2%80%99s-ai-driv…

Zero Trust for Software Development Companies: what “good” looks like in practice –

https://techcommunity.microsoft.com/blog/marketplace-blog/zero-trust-for-software-development-compa…

Azure mandatory multifactor authentication: Phase 2 starting in October 2025 –

https://azure.microsoft.com/en-us/blog/azure-mandatory-multifactor-authentication-phase-2-starting-…

Protect Copilot Studio AI Agents in Real Time with Microsoft Defender –

https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/protect-copilot-studio-ai-ag…

After hours

“Focusing is about saying no”-  https://www.youtube.com/watch?v=H8eP99neOVs

Editorial

If you found this valuable, the I’d appreciate a ‘like’ or perhaps a donation at https://ko-fi.com/ciaops. This helps me know that people enjoy what I have created and provides resources to allow me to create more content. If you have any feedback or suggestions around this, I’m all ears. You can also find me via email director@ciaops.com and on X (Twitter) at https://www.twitter.com/directorcia.

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week

Comparing AI services–an objective analysis?

bp1

If you have been following my articles about comparing AI services, you’d know that, through some ‘rule of thumb’ reasoning I was able to determine the following ranking of Ai services:

1. Deepseek

2. M365 Copilot

3. Copilot Researcher

4. Gemini

5. Copilot Studio

6. ChatGPT deep research

7. ChatGPT

The problem is that I used the same AI services to potentially evaluate the results that they in fact generated. Could that result in bias? Unsure, but I’d suggest probably, if you look at the results.

What I therefore decided to do was have the original articles evaluated by two AI services that were not on my original list, Claude and Grok. Here’s the result of jus these two:

AI Service Claude Grok Total
M365 Copilot 7 4 11
Gemini 3 7 10
Copilot Studio 5 5 10
Deepseek 6 2 8
Copilot Researcher 2 6 8
ChatGPT Deep Research 4 3 7
ChatGPT 1 1 2

If I now incorporate these results in the overall results I get the following:

AI Service Researcher Gemini ChatGPT Claude Grok Total
M365 Copilot 7 3 4 7 4 25
Deepseek 5 4 7 6 2 24
Gemini 4 7 2 3 7 23
Copilot Studio 2 5 5 5 5 22
Copilot Researcher 6 6 1 2 6 21
ChatGPT Deep Research 3 2 3 4 3 15
ChatGPT 1 1 6 1 1 10

That changes the ranking slightly to:

1. M365 Copilot

2. Deepseek

3. Gemini

4. Copilot Studio

5. Copilot Researcher

6. ChatGPT deep research

7. ChatGPT

with the average score being 20, which most services exceed. ChatGPT still lags, even after this! Interesting, huh?

I think my original conclusion remains valid – most AI services, except for ChatGPT, seem to produce very similar quality on average when prompted in the same way.

Comparing AI Services–the final analysis

bp1

I started out to provide an indication of the differences between different AI services here:

Testing the differences between AI services

I did a quick comparison here:

An analysis of how AI services vary

I then did a deep analysis of all the generated articles using:

Copilot Researcher

Gemini Deep Thinking

ChatGPT Deep Thinking

If you now take those three results and assign a score of 7 = highest and 1 = lowest recommendations of each and total them up, you end up with this ranking table:

AI Service Researcher Gemini ChatGPT Total Score
Deepseek 5 4 7 16
M365 Copilot 7 3 4 14
Copilot Researcher 6 6 1 13
Gemini 4 7 2 13
Copilot Studio 2 5 5 12
ChatGPT Deep Research 3 2 3 8
ChatGPT 1 1 6 8

 

The winner then appears to be, on average, Deepseek. However, you will note that most AI services tested, except ChatGPT have similar scores, with the ‘average’ score being 12, which most services, except again ChatGPT, scored at or above.

This analysis is far from perfect or ideal or for that matter without bias. There are so many variables that possibly come into play that it very difficult, if not impossible, to get a true ‘apples vs apples’ comparison of AI services. However, I think this result still does provide value if you are looking to answer the question of the ‘best’ AI service. That answer seems to largely be that most AI services, apart from ChatGPT, are pretty much the on par when it comes to prompting, so choosing from amongst these simply based on their response to prompts, doesn’t seem to matter all that much.

Of course, there are plenty of other factors, aside from prompt results, that should be considered. The quality of the generated results also is greatly affected by the actual prompts used and I am sure that also varies across the AI services as well.

What I’ll now be interested to see is what the ‘click’ rate is on each article after a period of time. Will the Google AI service generate more article ‘hits’ than the other articles? Time will tell and I’ll report back once enough time has elapsed. These results also make a good benchmark to potentially test again down the track to see if things have changed at all and the progress these AI agents have made.

Interesting time ahead.

Comparing AI services – a third analysis

bp1

Recently, I have been analysing the results produced from the same prompt in carious AI services. After having the various AI services generate answers I compared their value using Copilot Researcher and Gemini. To provide a final alternate analysis of the articles I used ChatGPT Deep Research and received the following analysis, summarised here:

————————–

Rankings (Value to SMB Owner): Based on clarity, practicality, and depth of recommendations, we rank the articles as follows (1 = most valuable):

  1. Deepseek (Aug 31) – Provides a step-by-step guide on replacing firewall functions with M365 features, with concrete examples (Safe Links, web filtering, Conditional Access) and even a cost comparison. Its clear bullet format and action-oriented advice make it highly accessibleblog.ciaops.comblog.ciaops.com.

  2. ChatGPT (Sep 2) – Gives an ultra-concise Q&A answer summarizing the essentials. The “Answer in short” explicitly states that for most SMBs a basic firewall suffices and expensive NGFWs add little compared to built-in M365 protectionsblog.ciaops.com. Its brevity makes it very easy to digest (2‑minute read), though it is simple.

  3. Copilot Studio (Aug 30) – A bullet-point summary that quickly lists the key protections in M365 (endpoint EDR, email filtering, conditional access, DLP, etc.)blog.ciaops.comblog.ciaops.com. Its Q&A style (“Short answer”) is user-friendly and covers the main points succinctly.

  4. M365 Copilot (Sep 3) – Offers a short answer plus a configuration blueprint (steps to enforce MFA, Intune baselines, Defender settings, etc.) focused on identity/device security. This balances brevity with practical steps. It clearly states that for remote-first SMBs, a basic router is enough and effort should go into Intune/M365 policiesblog.ciaops.comblog.ciaops.com.

  5. ChatGPT (Aug 28) – A traditional blog-style article with multiple sections on built-in security, Zero Trust, host firewalls, etc. It thoroughly covers many features of Business Premiumblog.ciaops.comblog.ciaops.com. While detailed, its long paragraphs (7‑min read) and technical tone may be harder for a busy non-expert to quickly follow.

  6. Gemini (Sep 1) – A formal, research-style analysis (13‑min) with executive summary, threat modeling, TCO, and compliance discussionblog.ciaops.comblog.ciaops.com. It is extremely comprehensive (notably covering things like PCI DSS) but in heavy academic tone. This depth is impressive but likely more than a typical SMB owner needs.

  7. Copilot Researcher (Aug 29) – An exhaustively detailed report (20‑min) with an executive summary, configuration guide, feature comparisons, and cost analysisblog.ciaops.comblog.ciaops.com. While it contains valuable info, its length and technicality make it the hardest to consume. It also concludes (like the others) that M365 BP can often replace expensive firewallsblog.ciaops.com, but the sheer volume can overwhelm small teams.

In summary, the shorter Q&A and bullet-list articles (Deepseek, ChatGPT Sep2, Copilot Studio, M365 Copilot) score highest for SMB owners because they deliver clear guidance quickly. The longer, more technical write-ups (Gemini, Copilot Researcher) score lower despite depth.

Overall Best: Deepseek’s article stands out as the most practical: it clearly explains why and how to use M365 features instead of buying pricey firewalls, with concrete steps and examplesblog.ciaops.comblog.ciaops.com. This level of clarity makes it particularly valuable for a small-business owner deciding on cost-effective security.

An alternate analysis of AI services

bp1

Recently, I have been analysing the results produced from the same prompt in carious AI services. After having the various AI services generate answers I compared their value using Copilot Researcher. To provide an alternate analysis of the articles I used Gemini Deep Research and received the following analysis, summarised here:

————————–

The seven articles provided by the user all arrive at a similar, well-reasoned conclusion regarding the strategic superiority of M365 Business Premium for the typical SMB. However, they vary in their clarity, depth, and how well they frame the discussion for a business-focused audience. The ranking below is based on an assessment of these qualitative factors, determining which AI tool provided the most valuable and actionable report for an SMB owner.

Ranking Criteria
  • Clarity & Structure: How easy is the argument to follow? Is the report well-structured and free of jargon?
  • Comprehensiveness: Does the report cover all key aspects of both solutions and the modern security landscape?
  • Depth of Insight: Does the report go beyond a simple feature list to discuss total cost of ownership, strategic alignment, and the new security model?
  • Actionability: Does the report provide a clear, practical recommendation for the SMB owner?

AI Tool Rankings – M365 vs Hardware Firewalls

AI Tool Rank Justification Key Strength
Gemini (Deep Research) 1 The article is a near-perfect strategic analysis, framing the decision from a business perspective. It provides the crucial total cost of ownership (TCO) discussion and, uniquely, identifies the critical PCI DSS exception, which demonstrates a high degree of nuance and awareness of a real-world business constraint. Exceptional strategic framing and business-centric analysis.
Copilot Researcher 2 The article provides a highly structured and detailed summary. Its strength lies in its comprehensive breakdown of the limitations of traditional firewalls, using clear, bulleted points that are easily digestible for a busy executive. The logical flow of the argument is excellent, making it very easy to understand why the old model no longer works. A comprehensive and highly structured breakdown of the problem.
Copilot Studio (with GPT-5 reasoning) 3 This output provides a very strong, detailed breakdown of the specific M365 Business Premium components. It excels at explaining how each component directly replaces a traditional perimeter security function. The argument is well-reasoned and authoritative, linking the new tools to the Zero Trust model. Outstanding detail on the M365 BP components and their function.
Deepseek (Deep Research) 4 This article is notable for its use of the powerful “firewall in the cloud” metaphor, which effectively communicates the strategic shift to a non-technical audience. It clearly outlines how M365 BP provides specific feature replacements, such as web content filtering and intrusion prevention, making the report very practical. Effective use of a powerful metaphor to simplify a complex topic.
M365 Copilot (GPT) 5 This article introduces the “thin-edge, strong-endpoint” security model, a key strategic concept that refines the discussion beyond a simple comparison. It provides a solid summary of how cloud and endpoint controls outperform older, perimeter-based setups in terms of TCO and risk reduction. Introduction of a key strategic model for modern security.
ChatGPT (Deep Research) 6 This article is a solid, albeit slightly more generic, summary of the core arguments. It is comprehensive and includes the key components of M365 BP that are relevant to the comparison, but it lacks the more granular, strategic framing seen in the higher-ranked outputs. It’s a good starting point but not as definitive as the others. A solid, comprehensive overview of the core points.
ChatGPT 7 This output is the most list-based and least narrative of the group. While it accurately lists the advanced security controls in M365 BP, it is more of a feature catalog than a strategic report. It does not provide the same level of business context or direct analysis of the TCO and strategic alignment as the others, making it less valuable for an executive decision-maker. Good at categorizing and listing the specific security controls.

Need to Know podcast–Episode 353

in this episode I talk about a recent series of blog posts I wrote about some analysis I did on various AI services available today as well as my thoughts on these. I also cover off the latest news and information in the Microsoft Cloud for you. Listen along.

Brought to you by www.ciaopspatron.com

you can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-353-ai-services-analysis/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

or Spotify:

https://open.spotify.com/show/7ejj00cOuw8977GnnE2lPb

Don’t forget to give the show a rating as well as send me any feedback or suggestions you may have for the show.

Resources

CIAOPS Need to Know podcast – CIAOPS – Need to Know podcasts | CIAOPS

X – https://www.twitter.com/directorcia

Join my Teams shared channel – Join my Teams Shared Channel – CIAOPS

CIAOPS Merch store – CIAOPS

Become a CIAOPS Patron – CIAOPS Patron

CIAOPS Blog – CIAOPS – Information about SharePoint, Microsoft 365, Azure, Mobility and Productivity from the Computer Information Agency

CIAOPS Brief – CIA Brief – CIAOPS

CIAOPS Labs – CIAOPS Labs – The Special Activities Division of the CIAOPS

Support CIAOPS – https://ko-fi.com/ciaops

Get your M365 questions answered via email

Welcome to the Microsoft Incident Response Ninja Hub –

https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/welcome-to-the-microsoft-incident…

Listen to an audio recap of your meetings in Teams –

https://techcommunity.microsoft.com/blog/Microsoft365InsiderBlog/listen-to-an-audio-recap-of-your-m…

Introducing Surveys Agent, your personal survey expert –

https://techcommunity.microsoft.com/blog/microsoft365insiderblog/introducing-surveys-agent-your-per…

What’s New in AI for Security from Microsoft Entra? –

https://techcommunity.microsoft.com/blog/microsoft-entra-blog/what%E2%80%99s-new-in-ai-for-security…

Microsoft ranked number one in modern endpoint security market share third year in a row –

https://www.microsoft.com/en-us/security/blog/2025/08/27/microsoft-ranked-number-one-in-modern-endpoint-security-market-share-third-year-in-a-row/

Securing and governing the rise of autonomous agents –

https://www.microsoft.com/en-us/security/blog/2025/08/26/securing-and-governing-the-rise-of-autonomous-agents/

How systems integrators are scaling innovation with Microsoft 365 Copilot and agents –

https://partner.microsoft.com/en-US/blog/article/copilot-partner-spotlight-august-2025

Microsoft deployment blueprint – Address oversharing concerns for your M365 Copilot deployment –

https://techcommunity.microsoft.com/blog/healthcareandlifesciencesblog/microsoft-deployment-blueprint—address-oversharing-concerns-for-your-m365-copi/4434598

Staying Ahead of Compliance: Keep Up with Key Insights from our Quarterly Compliance Update –

https://techcommunity.microsoft.com/blog/microsoft365copilotblog/staying-ahead-of-compliance-keep-up-with-key-insights-from-our-quarterly-complia/4448011

Microsoft Security Copilot in Intune deep dive – Part 1: Features available in public preview –

https://techcommunity.microsoft.com/blog/intunecustomersuccess/microsoft-security-copilot-in-intune-deep-dive-%E2%80%93-part-1-features-available-in-pu/4406244

What’s New in Microsoft Intune: August 2025 –

https://techcommunity.microsoft.com/blog/microsoftintuneblog/what%E2%80%99s-new-in-microsoft-intune-august-2025/4445612

OneNote for Windows 10 support is ending –

https://techcommunity.microsoft.com/blog/microsoft365insiderblog/onenote-for-windows-10-support-is-ending/4445230

Think before you Click(Fix): Analyzing the ClickFix social engineering technique –

https://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/

Deep Dive: DLP Incidents, Alerts & Events – Part 1 –

https://techcommunity.microsoft.com/blog/microsoft-security-blog/deep-dive-dlp-incidents-alerts–events—part-1/4443691

Deep Dive: DLP Incidents, Alerts & Events – Part 2 –

https://techcommunity.microsoft.com/blog/microsoft-security-blog/deep-dive-dlp-incidents-alerts–events—part-2/4443700

New SKUs available for M365 Business premium – https://techcommunity.microsoft.com/blog/microsoft-security-blog/deep-dive-dlp-incidents-alerts–events—part-2/4443700

Testing the differences between AI services – CIAOPS – https://blog.ciaops.com/2025/09/06/testing-the-differences-between-ai-services/

An analysis of how AI services vary – CIAOPS – https://blog.ciaops.com/2025/09/07/an-analysis-of-how-ai-service-vary/

Comparison of AI-Generated Articles – CIAOPS – https://blog.ciaops.com/2025/09/08/comparison-of-ai-generated-articles/